Re: [Sqlgrey-users] RELEASE: 1.4.0, security bugfix

[David R. <dr...@gr...>]

Lionel Bouton wrote:
>>- Ever thought of a "live update" of the whitelists rather than
>>supplying them with the source/rpm. Ie sqlgrey in say weekly intervals
>>loading them from sqlgrey.sf.net?
>
> Nice idea. I don't want to bloat SQLgrey with the download code (I'm
> already worried by its size and what it will be like with SPF support),
> but I sure can add a hook to make it reload the main whitelists on a
> SIGHUP for example. Then it's only a matter of a simple script that wil=
l
> fetch the download URLs from the conf file, download the whitelists,
> make some simple checks, replace the whitelist files and send SIGHUP to
> sqlgrey.

I like the idea of a script to update the whitelists.  This would be
something that could be added to a cron entry.  I don't like the idea of
putting that code into sqlgrey itself, if you should be able to turn it
off.

-Dave

PS - Version 1.4.0 has been working very well for me so far!